Distro News

Six vulnerabilities in libxml2, including heap-based buffer overflows and XXE risks, have been addressed in Ubuntu security updates.

Multiple vulnerabilities in the BlueZ Bluetooth stack could lead to denial of service or arbitrary code execution on Ubuntu systems.

Ubuntu has issued a security notice addressing numerous vulnerabilities across a wide range of Linux kernel subsystems.

Ubuntu has issued security updates for the Linux kernel affecting multiple architectures and subsystems to prevent system compromise.

A critical vulnerability in AMD processors could allow attackers to compromise SEV-SNP guest memory integrity.

OpenBSD 8.0 raises amd64 kernel virtual address space from 4 GB to 512 GB and adds hibernate support on arm64.

BleachBit 6.0.6 introduces cleaners for Helium and Docker Desktop, increases file wiping block size from 4 KiB to 512 KiB, and fixes admin-mode cleaning on Red Hat systems.

Bitwarden's official store and website downloads will use a commercial license starting with the next release, while the GPLv3 codebase remains available on GitHub with potential future feature divergence.

Audacious 4.6.2 brings SID file playback, expanded metadata parsing, and MPRIS OpenUri method support with Wayland-focused improvements.

APT 3.3.4 introduces SHA3-256 and SHA3-512 support for package verification and now rejects downloads when required hashes cannot be calculated.

Gentoo tabanlı MocaccinoOS 26.10, Linux kernel 6.18.57 LTS, COSMIC 1.10 ve KDE Plasma 6.7.5 içeren yeni bir sürüm olarak yayınlandı.

The dormant CutefishOS project has resurfaced with a completely rewritten desktop environment built using Anthropic's Fable 5.1 and Opus 5.5 AI models, featuring a custom Wayland compositor and graphics library independent of Qt and GTK.

The MIT-licensed tv-vibehack repository provides prompts and tools for using Claude and other AI coding agents to remove ads, telemetry and bloatware from Android TV devices via ADB.

Italo Vignoli argues that truly open standards require clear, unambiguous specifications that anyone can implement fully without reverse engineering or undocumented behavior, not merely published documents bearing the 'open standard' label.

Linux kernel 7.3 introduces memory management changes that let games run on GPUs with less VRAM than they request, alongside Apple M3 chip boot support and multiple AMD driver updates.

CobaltX 0.3 introduces X Mode, a full-screen controller-first game launcher with dedicated login session, plus handheld device support via Handheld Daemon.

Omarchy 4.0.5 is a maintenance release that migrates the Arch-based distribution to Qt 6.12, updates its default kernel to Linux 7.2.8 with the BORE scheduler, and includes over 30 fixes and security hardening changes.

Synex 26.10.17 updates its Debian Stable base and introduces COSMIC desktop version 1.10.0 with new core components.

FunOS 26.10 completes its transition to Rust-based core utilities and adopts PipeWire as the default multimedia server.

The openSUSE community highlights KDE's 30th anniversary, the release of Plasma 6.8, and significant Tumbleweed updates including Linux Kernel 7.2.9.

Asmi Linux 26.10 is a lightweight, Xfce-based distribution built upon Ubuntu 26.10 'Stonking Stingray'.

ZimaOS 1.8.0 introduces an intelligent Gallery module and expanded hardware configuration support for Intel and AMD platforms.

Voyager Live 26.10 is an intermediate release based on Ubuntu featuring two different package management editions.

Lubuntu 26.10 introduces an experimental Wayland session using the Miriway compositor alongside its default LXQt 2.4 desktop.

Valve's Steam Linux beta now uses a 64-bit build running inside the steamrt3c container to improve distribution consistency.

Kubuntu 26.10 is an interim release that sets Wayland as the default session and marks the final availability of the X11 session package.

The openSUSE community attended two major events, the openSUSE.Asia Summit 2026 in Yogyakarta, Indonesia, and Open Source Summit Europe 2026 in Prague.

Ubuntu Kylin 26.10 has been released with a 9-month support period, featuring the Linux 7.3 kernel and improved hardware support.

Ubuntu Unity 26.10 has been released, focusing on maintenance and bug fixes, and including updates such as Lomiri Calculator, Lomiri Files, and Lomiri Terminal by default.

Ubuntu Cinnamon 26.10 has been released, featuring the Cinnamon 6.6.9 desktop and various updates.

The new release focuses on a Budgie desktop 10.10.3 update and includes several new widgets and applet features.

The new Ubuntu Studio 26.10 release adds live-coding and algorithmic composition tools to its creative software stack.

The Edubuntu 26.10 release introduces GNOME 51, Linux kernel 7.3, and an improved system installer.

Ubuntu has released security updates for RabbitMQ Server to address several vulnerabilities including DoS, XSS, and authentication bypasses.

Ubuntu 26.10 introduces significant Rust-based replacements for core utilities and OpenPGP tools.

A study funded by the CCIA estimates that the proposed Cloud and AI Development Act (CADA) could cost the EU up to €233 billion over ten years.

Multiple security vulnerabilities in the Linux kernel affecting Microsoft Azure systems have been patched in Ubuntu 16.04 LTS.

AI tools are increasingly being used for kernel development tasks, including file access optimization and proposed directory structures for AI skills.

A vulnerability in the Go x/net/idna package could allow attackers to bypass hostname-based access controls via Punycode-encoded labels.

Epic Games is rebuilding its anti-cheat for Linux using eBPF and systemd, while also releasing a native launcher preview.

A consortium of open source vendors has formed a new company to market the openDesk collaboration suite to enterprises and critical infrastructure.

Multiple vulnerabilities in curl and libcurl affecting credential security, HSTS handling, and denial of service have been addressed in Ubuntu security updates.

Ubuntu has released security updates for Apache HTTP Server to address vulnerabilities including remote code execution, denial of service, and authentication bypass.

ElixirOffice is a new AGPL-3.0 office suite designed to mimic Microsoft Office's UI and compatibility.

Three vulnerabilities in U-Boot could allow for denial of service or arbitrary code execution via NFS, HTTP, or DHCPv6.

A wave of new open source AI-driven office suites, agentic tools, and large-scale models is entering the ecosystem.

A series of vulnerabilities in Bind can lead to denial of service, cache poisoning, or DNSSEC validation bypass.

Recent openSUSE Tumbleweed ARM snapshots introduced support for Armv9.6 and Armv9.7 instructions via binutils 2.47 and updated the Linux kernel to 7.2.9.

A signed integer overflow in the TCP stack can cause timers to fail, leading to resource exhaustion.

Multiple vulnerabilities and bugs in the hastd service can lead to data leakage in metadata or prevent storage replication.

FreeBSD is updating its zoneinfo files to reflect recent changes in global timezone boundaries and daylight-saving rules.

Ubuntu has patched numerous vulnerabilities in the Linux kernel OEM subsystem affecting networking, file systems, and drivers.

Ubuntu has issued security updates to address numerous vulnerabilities across a wide range of Linux kernel subsystems.

A NULL pointer dereference vulnerability in libde265 allows attackers to crash applications via crafted H.265 bitstreams.

Manjaro's testing branch receives major updates including GNOME 50.5, Mesa 26.2.4, and NVIDIA 615.71.09 drivers.